Corporate Security Analyst

Themis Solutions Inc.; Burnaby; On-site; CAD 70,000 - 110,000; Full time

Job summary

Clio, a global leader in legal AI technology, seeks a Corporate Security Analyst to join our CorpSec team in Canada. You will protect Clio from internal and external threats and work with IT Systems, Application Security, People, Compliance, and IT Services to mature security coverage.

In-office presence is required at least twice per week at one of our Canadian hubs (Burnaby, Calgary, or Toronto). You will monitor alerts, triage DLP events, run investigations, maintain runbooks, and support SOC

Qualifications

• Experience in corporate security or IT security functions.
• Ability to triage security alerts and conduct investigations.
• Familiarity with SOC 2 and ISO 27001 compliance is a plus.

Responsibilities

• Operate corporate security toolset and manage endpoint tools, detections, and investigations.
• Monitor and triage DLP alerts; run day-to-day EDR operations.
• Conduct phishing simulations and educate employees to reduce risk.
• Handle L1/L2 security incidents; triage and contain threats.
• Maintain runbooks and support evidence collection for compliance.
• Develop automation scripts to improve remediation and tune security tooling.
• Collaborate across security stack with Okta, 1Password, Google Workspace, and MDM.

Skills

Security monitoring

Incident response

DLP triage

Phishing simulations

EDR tooling

Automation scripting

Security compliance

Cross-functional collaboration

Tools

Okta

1Password

Google Workspace

MDM

Job description

Summary

Clio is the global leader in legal AI technology, empowering legal professionals and law firms of every size to work smarter, faster, and more securely. We are transforming the legal experience for all by bettering the lives of legal professionals while increasing access to justice. Summary: We're looking for a Corporate Security Analyst to join our rapidly growing CorpSec team. This role is for someone who is passionate about corporate security and building on existing frameworks, and is available to candidates local to one of our hubs (Burnaby, Calgary, or Toronto). You will be expected to be in-office a minimum of twice per week. CorpSec is transitioning and growing at Clio into a focused, mission-driven function with security systems and practices already in place. Your team works closely with IT Systems, Application Security, People, Compliance, and IT Services to ensure appropriate security coverage in detection, response, and establishing non-adversarial techniques. The Corporate Security Analyst will be responsible for adopting and unifying systems, communication, and oversight across IT Systems, Application Security, and Compliance. You will build upon existing trust, define a unified approach, and formalize the program in accordance with compliance requirements. You will build upon existing trust, work with a unified approach, and support the program in accordance with compliance requirements.

What you’ll do

• This role acts as an operator of Clio's corporate security toolset, owning the endpoint tools, investigative processes, and organizational culture required to protect Clio from internal and external threats - both accidental and intentional. You own the day-to-day execution: monitoring alerts, triaging DLP events, running investigations, and keeping the systems that protect Clio running reliably. You don't need to have all the answers - but you need to determine what you don't know, ask the right questions, and close the loop on everything you own.
• Build & Run: Monitor and triage DLP alerts to surface real signals from noise and operate EDR day-to-day by reviewing detections and executing response procedures. You’re naturally curious about how the tools you operate actually work, not just how to use them.
• Drive Education: Run phishing simulation campaigns end-to-end - from scheduling to employee education loops - while ensuring that no one is left guessing by communicating clearly when something breaks.
• Incident Response: Handle L1/L2 security incidents (phishing, device compromise, data loss) by triaging and containing threats. You take pride in ensuring that alerts don’t age in your queue.
• Optimize Systems: Maintain runbooks and support compliance evidence collection (SOC 2, ISO 27001). You adapt when priorities shift and don't need perfect information to make progress.
• Technical Growth: Develop scripts to drive auto-remediation and tune security tooling for AI detection to address unauthorized data moves.
• Collaborate: Engage with a security culture that solicits feedback and drives visibility across Clio’s security stack (Okta, 1Password, Google Workspace, MDM).

<